Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
File: UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft (raw, json)
Hash identifier: YUDnhnq7uyZ83O12r930luCK6d6Y42OZIxFJE/x079k=
Subject key identifier: C2:10:1B:B9:27:C1:F3:CF:F0:CF:0C:1F:8B:8A:44:3A:9E:A8:7A:2C
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial: 019FA0E0F73974C7C3A3A3198E20CDB98B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 00:02:05 +0000
Manifest this update: Mon 27 Jul 2026 00:02:05 +0000
Manifest next update: Tue 28 Jul 2026 00:02:05 +0000
Files and hashes: 1: 1cBPHp07EJ-UJNHMiRbTHD2251k.roa (hash: NcGpm88oPiijUJeByynWEeZDrBUROTCD4N4d0hBuT0w=)
2: O0z1dWysTLckLSWa-xjk4iWOyJo.roa (hash: xfK3oB04u+nOy6dQDoBykL7MzhjzL+9xzN4TDIDbuCg=)
3: UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl (hash: MydzL11nlDomF7SbdSXnpLnQcgA4QI8QSu2ZL6GX3KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:f7:39:74:c7:c3:a3:a3:19:8e:20:cd:b9:8b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Validity
Not Before: Jul 27 00:02:05 2026 GMT
Not After : Jul 28 00:02:05 2026 GMT
Subject: CN=c2101bb927c1f3cff0cf0c1f8b8a443a9ea87a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7e:12:74:10:22:c3:34:90:95:93:a9:b0:64:
a7:23:18:f8:72:ab:58:79:96:1a:6e:9e:4b:d8:8e:
ed:98:1b:10:d6:36:84:2b:e2:b2:a7:2d:5e:26:3f:
51:7d:04:0e:8c:86:37:dd:88:0c:9b:62:bb:81:f6:
a9:95:14:98:f5:07:ab:73:c9:ef:c3:e7:9d:c3:19:
02:f7:d1:8e:ac:20:08:3b:a4:fd:36:1d:2d:d9:46:
58:43:95:75:a6:48:5d:14:db:d5:e8:96:62:06:f4:
62:33:c8:db:ed:bc:c0:25:31:b4:90:12:22:83:58:
cc:0a:36:28:06:e3:63:70:b9:68:88:9c:f3:29:44:
29:7d:6d:de:50:bf:9c:cc:56:26:5d:9b:88:ef:95:
6e:05:b8:7c:0e:c7:7d:fd:eb:ae:32:b9:a2:ba:83:
37:aa:08:03:a1:16:35:26:08:ec:72:55:79:26:aa:
c8:48:ec:16:88:32:de:23:ca:a5:60:19:50:82:fa:
a6:e6:1c:fc:2e:84:b9:c4:ab:da:5a:02:02:d2:27:
3c:63:8b:72:96:74:f1:e6:7f:4d:3d:6b:4c:e2:35:
e0:95:34:8d:bb:d8:96:cb:90:57:30:03:f0:e1:ac:
b7:4b:86:25:10:45:18:c9:77:58:07:1d:6a:57:8e:
73:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:10:1B:B9:27:C1:F3:CF:F0:CF:0C:1F:8B:8A:44:3A:9E:A8:7A:2C
X509v3 Authority Key Identifier:
keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:01:08:1a:ef:ec:b4:2f:4f:d1:6c:b0:56:7b:11:9d:a1:bb:
38:b0:72:af:9f:b3:55:bc:0c:73:fc:d7:83:2d:51:c6:78:2b:
2a:4b:d3:6c:21:59:0c:cd:c0:57:15:02:be:d7:5c:5e:8d:6b:
35:67:74:a8:e6:81:a2:26:bf:69:4c:7d:f4:65:02:2f:40:21:
61:00:17:49:73:52:64:f1:6b:91:be:52:31:07:74:6a:83:d2:
d5:6c:0d:7b:9a:65:d1:ff:63:fa:ca:80:00:15:f2:99:2c:cc:
18:e0:7b:39:a5:8e:7b:03:9b:75:ab:c9:c6:3f:9f:50:24:4c:
85:2d:fd:83:75:97:bb:d4:4e:78:c7:33:c1:c6:19:09:be:57:
9a:43:94:18:02:bc:ae:4d:f8:96:af:e9:d7:df:9f:3a:75:58:
50:27:58:2a:1d:a0:53:3a:78:26:7c:a4:5f:e5:58:6c:1c:c2:
cf:34:be:d8:ec:f9:a2:ef:d3:d0:d6:4e:e2:c5:e9:e1:e1:35:
51:00:36:db:c1:98:45:75:57:b2:4b:eb:25:cb:0c:0e:39:c6:
28:a1:d2:e1:97:5c:cc:45:46:c4:a2:04:d5:e9:c2:83:5a:39:
6d:c5:44:f8:b4:b2:64:9b:31:d4:58:35:4f:09:61:09:b8:26:
41:ce:74:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:04:52 2026 by rpki-client